Top "Fortify" questions

how to protect location.href from cross site scripting in javascript?

Here in my javascript function im using location.href as follows location.href = "../Floder1/result.jsp"; it is working fine …

javascript cross-site location-href fortify

Dynamic Code Evaluation: Unsafe Deserialization (Spring Boot 2) - how to avoid actuator related fortify issue, or is it a false positive?

I am using the below actuator dependency <dependency> <groupId>org.springframework.boot</groupId> <…

spring-boot-actuator fortify

Path Manipulation error fix for filename

I have a piece of code where-in I have to read a file for its possible contents. I'm encountering Path …

java owasp fortify fortify-source

Fortify Log Forging Issue

We are scanning our .NET application with Fortify and need to provide some information on why Log Forging issue does …

logging fortify log-forging

Running fortify scan on .cs files

Is it possible to run Fortify scan on .cs files ? have searched on net and SF but did not get …

c# .net fortify

How to fix XSS vulnerabilites

We're using fortify to scan java source code & it is complaining below error: Method abc() sends unvalidated data to …

java jsp fortify

HP Fortify scan using Gradle

I am using the configuration below in build.gradle for running HP Fortify scan: // Fortify configuration configurations { fortify { extendsFrom compile } } // …

gradle build.gradle fortify fortify-source

Fixed fortify scan Locale changes are reappearing

I have one J2EE application and for that application, fortify scan shows Locale dependent issues. I have fixed those …

java fortify

Fortify and AntiXSS

My company requires our ASP.NET code to pass a Fortify 360 scan before releasing the code. We use AntiXSS everywhere …

c# asp.net html-encode antixsslibrary fortify

HP Fortify -- annotating method parameters

I'm trying to eliminate false-positives from an HP Fortify scan of a Java application. This method causes a "Privacy Violation" …

java fortify